From owner-freebsd-questions@FreeBSD.ORG Tue Jan 8 15:08:05 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 77E1F16A417 for ; Tue, 8 Jan 2008 15:08:05 +0000 (UTC) (envelope-from schneecrash@gmail.com) Received: from wa-out-1112.google.com (wa-out-1112.google.com [209.85.146.180]) by mx1.freebsd.org (Postfix) with ESMTP id 7978B13C457 for ; Tue, 8 Jan 2008 15:08:05 +0000 (UTC) (envelope-from schneecrash@gmail.com) Received: by wa-out-1112.google.com with SMTP id k17so13827093waf.3 for ; Tue, 08 Jan 2008 07:08:05 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:reply-to:sender:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth; bh=eabFeUjJ77bQUMAhQ60s+5Bi3o0Sq8oEpwvk4T5cw6c=; b=f8IQlxCxqlNBKbq3QIHgQlEsbF25iGBaDKmNZJQQe9hPFvFEsJ9O4XDFY9WDbIPkycpII362mnqc+cvk6ZPzYLyuwWGABNFta+Qd86KlSZi5nN9MxAWV2H1+JCSvolTA/18Btnx1hCKl1DdF2eI8hHZpgzdCe2QWi5yKG+IPGDA= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:reply-to:sender:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth; b=En5Zdy9TpY7E2Lenp2XHIIO1DCZbEQiR4J8EdNcnzK+8t1sJVDEZCsggLvr8K3zb8QM8OztO7wMiC6+le0cPpOcQjNv1Elbn7O1r9BRAgc8wqX9ckja8/KCZiY9UMV3cuZxSUqkPH402uWXUMB9GEzSOI0y5dKh/Nygnr2Ydt10= Received: by 10.115.15.1 with SMTP id s1mr6434566wai.0.1199804884651; Tue, 08 Jan 2008 07:08:04 -0800 (PST) Received: by 10.114.185.2 with HTTP; Tue, 8 Jan 2008 07:08:04 -0800 (PST) Message-ID: <70f41ba20801080708u4b05b37cta9315a0e0df5116f@mail.gmail.com> Date: Tue, 8 Jan 2008 07:08:04 -0800 From: snowcrash+freebsd Sender: schneecrash@gmail.com To: "Gelsema, P (Patrick)" In-Reply-To: <56088.195.50.100.20.1199787921.squirrel@www.superhero.nl> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <70f41ba20801071743o437b86ebx7956ad73250becb1@mail.gmail.com> <56088.195.50.100.20.1199787921.squirrel@www.superhero.nl> X-Google-Sender-Auth: d031f9fb447c0baf Cc: freebsd-current@freebsd.org, freebsd-questions@freebsd.org Subject: Re: jail on ZFS - "Unable to mount devfs" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: freebsd-questions@freebsd.org List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Jan 2008 15:08:05 -0000 hi patrick, > If I remember correctly there was no password file for in the jail. I > think you have to rerun a certain command. Of course I do not remember the > command :( The command should create the master password database. using the ServiceJail model, after populating the jail skeleton and running mergemaster, the two commands i run are, /usr/bin/cap_mkdb /j/jSKEL/etc/login.conf /usr/sbin/pwd_mkdb -d /j/jSKEL/etc -p /j/j/etc/master.passwd which should take care of that. > Also you have to run within in the jail newaliases to create the aliases > file, do a touch /etc/fstab to stop complaints about unable to read > mountpoints. hm. i did not do that this time around. i'd built my jail-world with *both* NO_MAILWRAPPER=true & NO_SENDMAIL=true, so i mayhave caused myself a problem. rather than cp'ing bins, tobe safe, i'll just rebuild world ... and see in a bit if that helps. thanks. > Furthermore I am not sure that you can run a jail on a zfs file system. > The setup I have is that I run my jails on ufs and have a zfs filesystem > available within the jail. ?? if that's true, then that renders the rest moot -- and i have a problem. atm, i have cat /etc/fstab /dev/mirror/gm0s1a /bootdir ufs rw 1 1 /dev/mirror/gm0s1b none swap sw 0 0 /dev/acd0 /cdrom cd9660 ro,noauto 0 0 /j/jMROOT /j/jTEST nullfs ro 0 0 /j/s/jTEST /j/jTEST/s nullfs rw 0 0 zfs list NAME USED AVAIL REFER MOUNTPOINT z 5.23G 213G 250M /z z/data 20K 213G 20K /data z/home 28.5K 213G 28.5K /home z/j 23K 213G 23K /j z/tmp 406K 213G 406K /tmp z/usr 4.88G 213G 4.88G /usr z/var 105M 213G 105M /var where z/j is a zfs mount. i *can* access the jail, and do just about 'all' i need to in the jail (builds, exec, etc). but do *not* yet know if, by running the jail on zfs space whehter i've compromised anything. do you have a reference for your comment? or, perhaps, someone else can comment, as well? thanks!